This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json) Hash identifier: s/SDnaA1rM2GYaDgE/wu2sWACGyXz3nZU0BibXRHdNU= Subject key identifier: 36:AD:84:01:DE:E8:30:B8:FA:05:05:D0:0C:33:7C:25:C3:C3:FF:16 Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86 Certificate serial: 019B3D231F66A3C317589AEF383FA51FFA4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 19:01:10 +0000 Manifest this update: Sat 20 Dec 2025 19:01:10 +0000 Manifest next update: Sun 21 Dec 2025 19:01:10 +0000 Files and hashes: 1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: zEaOcUgN1GdSMWFa9yJd/OTN5sa7uqwAvzoFb38wBdw=) 2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1f:66:a3:c3:17:58:9a:ef:38:3f:a5:1f:fa:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86 Validity Not Before: Dec 20 19:01:10 2025 GMT Not After : Dec 21 19:01:10 2025 GMT Subject: CN=36ad8401dee830b8fa0505d00c337c25c3c3ff16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:7f:8a:44:d3:0c:46:b7:7c:01:92:24:49: 73:75:a9:19:55:88:50:e1:26:bb:1c:99:d3:f9:be: cf:b4:a1:25:47:04:89:7d:ec:b8:28:7e:17:a9:64: 39:dd:44:a5:1f:a2:49:16:0f:23:fe:4a:ff:de:de: 39:86:42:1a:4d:a3:99:e8:93:b0:5e:26:ec:c1:38: 9a:71:a6:8b:4d:57:43:02:d5:43:5a:8d:2e:46:06: 8b:a5:39:dd:77:46:c8:e4:df:dd:07:10:8b:af:09: 1f:0a:28:03:17:82:1d:9a:cb:4a:b6:fe:b0:a6:24: b8:58:5e:1c:08:be:32:5f:4f:f4:3d:0d:a3:21:8e: 23:00:b3:73:ca:30:5e:4c:5d:ab:75:5d:8d:d9:ca: a6:6f:89:dc:8e:fc:b5:fa:e8:66:aa:b0:71:88:77: 6e:08:04:0c:a0:81:75:dc:92:17:f1:51:f4:14:a5: 47:30:1f:45:de:97:fd:ab:29:ea:50:84:f9:ee:7c: b2:b8:d6:4c:de:e9:0b:9f:a4:ac:95:bc:c9:d6:e4: f7:83:d0:84:e2:59:dc:16:a1:24:b9:02:5b:7a:f7: 58:ba:1c:b5:26:2e:22:53:d9:36:2b:cb:bc:9a:46: aa:68:d1:4f:96:d2:32:69:f4:1a:6d:c9:ae:02:1a: 84:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AD:84:01:DE:E8:30:B8:FA:05:05:D0:0C:33:7C:25:C3:C3:FF:16 X509v3 Authority Key Identifier: keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:09:2e:d2:88:1d:06:4b:73:ee:4d:fe:b4:23:16:40:07:75: 7b:10:14:58:99:60:00:a1:40:8a:30:ac:9c:da:28:6e:f0:66: 74:8b:9c:de:07:c0:cb:99:07:a7:64:34:0a:66:4a:c0:a0:76: bb:8f:da:65:96:6b:af:a8:5b:8d:36:06:90:09:12:8a:3d:84: 5f:6e:d6:dd:62:3b:3a:f3:cf:0a:36:a8:4f:67:d2:c8:71:63: 6f:7c:da:02:69:e1:dc:db:ed:cd:8b:ce:3b:71:07:3e:d2:4b: 1d:3c:ac:d4:f3:ee:17:b4:79:69:2e:fa:9d:67:12:83:44:cd: 75:8e:c6:9e:b2:99:35:30:2a:09:86:97:e0:d2:fc:22:ee:d2: fb:00:89:a4:73:2f:08:f5:cf:e1:8f:44:86:7a:53:be:84:6a: a2:03:f9:f5:31:f0:d0:14:2d:5f:13:99:c8:57:f0:58:7c:c3: 4b:ad:6a:7c:ab:88:d6:51:ec:7f:d9:bb:b0:e1:97:d9:c6:30: ab:72:f2:ac:21:a9:e7:64:bc:19:c4:3a:2c:0a:fe:d7:49:63: c2:ca:b3:09:c2:3e:7c:ee:08:6c:90:29:8a:d6:2f:79:6d:cf: f6:b6:92:cc:f7:b8:51:b8:80:95:1a:ac:8e:53:e8:89:2a:64: 29:c6:51:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ix9mo8MXWJrvOD+lH/pLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYmM5ZTkxMDMxNmJlMmYwNDMzYWE5NTM5MmNkNjczOWRj MjZiODYwHhcNMjUxMjIwMTkwMTEwWhcNMjUxMjIxMTkwMTEwWjAzMTEwLwYDVQQD EygzNmFkODQwMWRlZTgzMGI4ZmEwNTA1ZDAwYzMzN2MyNWMzYzNmZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/h/ikTTDEa3fAGSJElzdakZVYhQ 4Sa7HJnT+b7PtKElRwSJfey4KH4XqWQ53USlH6JJFg8j/kr/3t45hkIaTaOZ6JOw XibswTiacaaLTVdDAtVDWo0uRgaLpTndd0bI5N/dBxCLrwkfCigDF4IdmstKtv6w piS4WF4cCL4yX0/0PQ2jIY4jALNzyjBeTF2rdV2N2cqmb4ncjvy1+uhmqrBxiHdu CAQMoIF13JIX8VH0FKVHMB9F3pf9qynqUIT57nyyuNZM3ukLn6SslbzJ1uT3g9CE 4lncFqEkuQJbevdYuhy1Ji4iU9k2K8u8mkaqaNFPltIyafQabcmuAhqE0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDathAHe6DC4+gUF0AwzfCXDw/8WMB8GA1UdIwQY MBaAFP28npEDFr4vBDOqlTks1nOdwmuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYt YTE0NmQ2MDQ3MzM3LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYtYTE0NmQ2MDQ3MzM3 LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgku0ogd Bktz7k3+tCMWQAd1exAUWJlgAKFAijCsnNoobvBmdIuc3gfAy5kHp2Q0CmZKwKB2 u4/aZZZrr6hbjTYGkAkSij2EX27W3WI7OvPPCjaoT2fSyHFjb3zaAmnh3NvtzYvO O3EHPtJLHTys1PPuF7R5aS76nWcSg0TNdY7GnrKZNTAqCYaX4NL8Iu7S+wCJpHMv CPXP4Y9EhnpTvoRqogP59THw0BQtXxOZyFfwWHzDS61qfKuI1lHsf9m7sOGX2cYw q3LyrCGp52S8GcQ6LAr+10ljwsqzCcI+fO4IbJApitYveW3P9raSzPe4UbiAlRqs jlPoiSpkKcZRVg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:23 2025 by rpki-client